
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: yj7i95mOSzdsKJNdKLRYHArHO2+sGI29WZ0QNPfVVfw=
Subject key identifier: 4C:12:F3:67:71:2C:30:53:54:2C:3E:D9:39:B1:67:0D:CE:31:D8:E7
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 047C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 0434
Signing time: Thu 05 Nov 2026 00:45:18 +0000
Manifest this update: Thu 05 Nov 2026 00:45:17 +0000
Manifest next update: Thu 12 Nov 2026 00:45:17 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 1ABuIvy69ShRisFB4Jbo6mAbrwPl465z+DMlTKuZQ10=)
2: DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa (hash: 80FMYu4uMNxrWDdWrIbEc3oZ2iDpoKSZnSMm7WEC+nc=)
3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
4: 1E08C118BCA011F18FAF0E186511F970.roa (hash: cXzfWAgVNt/oetYU5jLI6QujcWE7Ht0Vkr37uq+4fB8=)
5: 51904090D11A11F189D44B64FF65CEF9.roa (hash: vDYM+jXj4oMJJJUhKdfSbjavg5gJTNzFnGTCGO9R+bM=)
6: 95C64BC0A20C11F1978F0A1A4811F970.roa (hash: wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 00:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Nov 5 00:45:17 2026 GMT
Not After : Nov 12 00:45:17 2026 GMT
Subject: CN=6aebd19d-9569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:72:48:e4:c4:62:c5:48:fd:d0:dc:88:38:
07:62:1a:9d:28:11:d4:d9:2e:16:c2:84:6d:df:2a:
e4:7b:74:d2:36:b8:cb:b0:8d:95:2e:7d:e8:7a:cc:
0b:c7:2c:ea:a6:82:3b:94:25:c3:40:8a:63:3e:f6:
9b:dd:b0:75:2a:22:1e:6e:78:22:f1:fc:9f:59:ed:
55:99:e0:a0:26:9c:67:ed:e4:85:22:f3:e1:f0:50:
9f:62:84:58:f2:c1:49:a5:02:d5:72:88:67:b7:ae:
df:36:2a:b6:c3:8c:1b:54:a0:c5:90:79:77:65:30:
35:df:0b:a3:82:68:3c:fc:71:d1:5e:4c:d4:c7:47:
73:ea:37:d8:13:a0:be:c7:7d:ce:5b:ce:24:46:a8:
d2:85:43:03:8d:66:d2:e9:30:6c:8d:f4:bd:5a:2a:
97:04:1e:02:a5:e0:3f:ec:20:71:0d:7b:c3:5e:22:
03:1f:0b:8e:c4:d1:f3:87:5f:00:7e:09:20:70:bf:
3d:89:34:7d:fc:f1:d1:9a:f2:8f:a6:b8:14:1d:1f:
b4:dc:0e:a9:76:08:88:88:1d:a5:fd:c5:a2:0a:a5:
71:16:1a:f9:bb:56:d4:d4:99:c8:26:f2:63:2f:a3:
34:8f:d3:a4:71:81:44:63:83:60:99:21:bd:92:4a:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:12:F3:67:71:2C:30:53:54:2C:3E:D9:39:B1:67:0D:CE:31:D8:E7
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:83:2c:5c:7f:1b:cd:97:0c:9f:ec:21:90:90:3d:ac:ef:
fe:24:62:26:fa:ec:d5:73:65:82:a4:e2:1c:68:9f:d0:c4:49:
64:b3:a9:1a:bc:26:d0:0a:5a:35:00:6b:59:33:52:d2:81:1d:
93:5f:ff:3e:54:0c:2a:8b:3c:13:ae:23:8d:9b:ae:cc:2e:9e:
e5:a0:a9:4c:27:11:78:7b:91:5f:31:16:8d:a2:07:63:d5:d2:
0c:55:6d:3f:55:c3:46:ad:2c:6b:87:ac:7e:ad:a9:92:b3:f2:
e0:ac:57:c0:c9:19:fb:3f:6e:cd:43:5d:47:d1:1c:df:e2:75:
f8:32:fc:1f:43:e9:d7:5a:70:78:56:25:b9:cc:da:ac:36:58:
c7:34:c9:5f:48:3a:a5:be:fa:4a:d8:ea:4c:4f:7d:a9:d0:83:
76:35:7b:a2:a1:63:a8:ce:2e:4e:e8:70:1c:5b:88:22:34:60:
91:48:6c:d2:49:3d:58:e0:f0:34:12:8b:cd:3c:d1:3d:00:2a:
d9:c4:16:87:60:2e:f9:23:22:7b:27:d0:52:84:e4:cd:d8:e5:
26:24:1c:54:7d:e3:bb:cd:0e:74:0c:f3:ac:6d:b5:5c:ec:99:
80:cc:81:49:14:21:9f:be:ab:52:81:e4:bd:bf:e6:da:04:7e:
64:70:21:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz
NDQ2OEM3QjkwHhcNMjYxMTA1MDA0NTE3WhcNMjYxMTEyMDA0NTE3WjAYMRYwFAYD
VQQDEw02YWViZDE5ZC05NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQNySOTEYsVI/dDciDgHYhqdKBHU2S4WwoRt3yrke3TSNrjLsI2VLn3oeswL
xyzqpoI7lCXDQIpjPvab3bB1KiIebngi8fyfWe1VmeCgJpxn7eSFIvPh8FCfYoRY
8sFJpQLVcohnt67fNiq2w4wbVKDFkHl3ZTA13wujgmg8/HHRXkzUx0dz6jfYE6C+
x33OW84kRqjShUMDjWbS6TBsjfS9WiqXBB4CpeA/7CBxDXvDXiIDHwuOxNHzh18A
fgkgcL89iTR9/PHRmvKPprgUHR+03A6pdgiIiB2l/cWiCqVxFhr5u1bU1JnIJvJj
L6M0j9OkcYFEY4NgmSG9kkq9KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwS82dx
LDBTVCw+2TmxZw3OMdjnMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB
RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU
c1VoRlE1c2E1UHMwUm94N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPc2DLFx/G82XDJ/sIZCQPazv/iRiJvrs1XNlgqTiHGif0MRJZLOpGrwm0Apa
NQBrWTNS0oEdk1//PlQMKos8E64jjZuuzC6e5aCpTCcReHuRXzEWjaIHY9XSDFVt
P1XDRq0sa4esfq2pkrPy4KxXwMkZ+z9uzUNdR9Ec3+J1+DL8H0Pp11pweFYlucza
rDZYxzTJX0g6pb76StjqTE99qdCDdjV7oqFjqM4uTuhwHFuIIjRgkUhs0kk9WODw
NBKLzTzRPQAq2cQWh2Au+SMieyfQUoTkzdjlJiQcVH3ju80OdAzzrG21XOyZgMyB
SRQhn76rUoHkvb/m2gR+ZHAhrA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:45 2026 by rpki-client